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RECEIVED 

CENTRAL FAX CENTER 

SEP 2 7 2007 

IN THE CLAIMS: 

1. (currently amended) A method for securing _ 
network-connected resources, the method comprising: 

at a first network-connected node, receiving an unencrypted 
electronically formatted job; 

receiving CK, a symmetrical encryption key (K) encrypted 
using an asymmetrical encryption public key (pubK); 

receiving CH, a hash (H) of the job, further encrypted using 

K; 

receiving a selection command for a particular one of a 
plurality of encrypted resources; 

decrypting CK using an asymmetrical encryption private key 
(privK), corresponding to pubK, to recover K; 

hashing the job, generating H; 
using K to validate CH; 

in response to validating CH, decrypting an encrypted 
resource using K; [[andj] 

using the decrypted resource to process the job: 

wherein receiving a selection command for a particular one of 
a plurality of encrypted resources includes receiving CKj, where 1 < i < m: 
and, 

wherein decrypting the selected resource in response to the 
encrypted resource selection command includes decrypting CKi to recover 
one of symmetrical encryption kevs Kj throu gh Km. where Kj through Km 
correspond to encrypted resources CR; through CR>n . 
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2. (currently amended) The method of claim 1 
wherein using Kt to validate CHi as follows includes : 

encrypting H' using Ki, obtaining CHi'; and, 
matching CHi to CHi'. 

3. (currently amended) The method of claim 1 
whoroin using Kj to validate CHi ft 3 follows includes : 

decrypting CHi using Ki, generating H; and, 
comparing H to H'. 

4. (currently amended) The method of claim 1 
further comprising: 

prior to receiving the job, CK», and CHi, receiving the 
encrypted resource; and, 

storing the encrypted resource. 

5. (currently amended) The method of claim 4 
further comprising: 

installing pubK ([,]] and privK upon initialization. 

6. (previously presented) The method of claim 1 
wherein receiving the unencrypted electronically formatted job includes 
receiving a print job in a format selected from the group including text 
and image formats. 

7. (original) The method of claim 4 wherein storing 
the encrypted resource includes storing an encrypted font resource; and, 
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wherein using the decrypted resource to process the job 
includes printing a print job using the decrypted fonts. 

8. (original) The method of claim 7 wherein storing 
the encrypted font resource includes storing resources selected from the 
group including a logo, personal signature image, and glyph. . 

9. (original) The method of claim 4 wherein receiving 
the encrypted resource includes receiving the encrypted resource in a 
format selected from the group including hypertext transport protocol 
(http) and file transport protocol (FTP). 

10. (original) The method of claim 1 further 

comprising: 

at a second network-connected node, generating the job; 

encrypting Ki with pubK, generating CKi; 

hashing the job, generating H; 

encrypting H using Ki, generating CEfe and, 

sending the job, CKi, and CHi to the first node for job 

processing. 

11-12. canceled 

13. (currently amended) The method of claim 1 
wherein receiving the unencrypted electronically formatted job includes 
receiving the job at network-connected node N[[iJ]^, where 1< [[i\]k <,n; 
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wherein receiving CKi includes Ni receiving CKik, where CKik. 
is generated by encrypting Kj using corresponding asymmetrical 
encryption public key pubK[[i]]&; and, 

wherein decrypting CK includes Ni decrypting CKik using 
corresponding asymmetrical encryption private key privK[{(Jj£, to recover 
Ki. 

14. (currently amended) The method of claim 1 
wherein receiving the unencrypted electronically formatted job includes 
receiving the job at network-connected node N[[i]]i, where 1< [[i]]k <n; 

wherein receiving CK includes Ns receiving CKik, 
corresponding to symmetrical encryption key Kik, encrypted using 
pubKEHfe 

wherein receiving CH includes Ni receiving CH&, a hash of 
the job encrypted using corresponding symmetrical encryption key Kik; 
and, 

wherein decrypting CK includes Ni decrypting CKi* using 
asymmetrical encryption private key privK[[i]j4, to recover corresponding 
symmetrical encryption key Ki&. 

15. (currently amended) The method of claim 14 
wherein using K to validate CH includes: 

N[[i]]a encrypting H' using symmetrical encryption key Kik, 
obtaining CHa'; 

N[[i]] matching CH/& to corresponding CKik!; and, 
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wherein decrypting an encrypted resource using K includes 
N[[i]] decrypting the encrypted resource using symmetrical encryption key 

16. (currently amended) The method of claim 14 
wherein using K to validate CH includes: 

N[[i]] decrypting CH& using symmetrical encryption key Kik, 

obtaining H; 

Ni comparing H to H'; . and, 

wherein decrypting an encrypted resource using K includes 
N. decrypting the encrypted resource using symmetrical encryption key 
K*. 

17. (currently amended) A method for accessing 
network-connected processing resources, the method comprising: 

at a second node, generating an unencrypted electronically 
formatted job; 

encrypting a symmetrical encryption key K with an 
asymmetrical encryption key (pubK), generating CK; 

hashing the job generating H; 

encrypting H using K, generating CH; 

sending the job, CK, [[and]] CH and a selection command for 
a particular one of a pl u ra lit y of encrypted resources to a first network- 
connected node; and, 

processing the job at the first node using a K encrypted 

resource^ 
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wherein encrypti ng the symmetrical encryption key K with 
an asymmetrical enc ryption kev (pubK). generating CK, includes 
encrypting Ki, where K; through Km correspond t o encrypted resources 
CR/ throu gh CRm. with pubK to generate CK:: and, 

wherein sending the selection c ommand for a particular one 
of a plurality of encrypted resour ces includes sending CKl 

18. (currently amended) A system for using secure 
network -connected resources, the system comprising: 
a first device including: 

a network-connected port for receiving an unencrypted 
electronically formatted job, for receiving CK ; a symmetrical encryption 
key (K) encrypted using an asymmetrical encryption public key (pubK), 
and for receiving CH, a hash (H) of the job, further encrypted using K; 

a hash unit having an interface to accept the job and to 
supply a hash of the job (H'); 

a memory having an interface to supply an asymmetrical 
encryption private key (privKj), corresponding to pubK*, and an encrypted 
resource; 

a security unit having an interface to authorize access to the 
encrypted resource in memory, in response to validating CHi; [[and,]] 

a processing unit having an interface to accept the job and a 
decrypted resource, and to supply a job processed using the decrypted 
resource; 

w herein the first device network-connected port receives a 
encrypte d resource selection command: and. 
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wherein the decryptio n unit decrypts CK;. where 1 £ i < m. f.n 
recover one of symmetri c al encry ption kevs K; thr ough Km. w^rp TO 
t hrough Km correspond to encrypted re s ources CR? through QRm . 

19. (currently amended) The system of claim 18 
further comprising: 

a- doorypting unit h nv ing an intcrfaoc t o ueccpt CK an d 
privK, to generate K in rcoponoc to decrypting CK uaing privK, to d em ^ 
the encrypted resource from memory uoing K, and oupply the decrypte d 

an encryption unit having an interface to accept FT and Ki, 
and supply CH/ in response to using Ki to encrypt H'; and, 

wherein the security unit accepts CHi and Cftf and validates 
CHi by matching CHi to CH. J . 

20. (currently amended) The system of claim 18 
further comprioing: 

a decrypting unit haying an interface to accept CH, CK, -aad 
privK, to generate K in rooponac to decrypting CK uoing privK, to oupply 
H in response to decrypting CH uaing K, and oupply the decrypt e d 
resource; and, ' 

wherein the security unit accepts H and H' and validates CHi 
by matching H to H\ 

21. (original) The system of claim 18 wherein the 
network-connected port receives the encrypted resource for storage in the 
memory. 
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22. (original) The system of claim 18 wherein the 
memory is a read only memory (ROM) for accepting and storing privK 
upon device initialization. 

23. (original) The system of claim 18 wherein the first 
device is a printer; and, 

wherein the network-connected port receives a print job in a 
format selected from the group including text and image formats. 

24. (original) The system of claim 23 wherein the 
memory stores encrypted font resources; and, 

wherein the processing unit is a print engine that supplies a 
job printed using the decrypted fonts. 

26. (original) The system of claim 24 wherein the 
memory stores encrypted font resources selected from the group including 
a logo, personal signature image, and glyph. 

26. (original) The system of claim 21 wherein the 
network-connected port receives an encrypted resource for storage in a 
format selected from the group including hypertext transport protocol 
(http) and file transport protocol (FTP). 

27. (currently amended) The system of claim 18 
further comprising: 

a second device including: 
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a processor to supply a job; 

a hash unit having an interface to accept the job 
and to supply a hash of the job (H); 

an encryption unit having an interface to accept 
H, to supply CKj, the encryption of symmetrical encryption key Ki 
using pubKi, and CHi, the encryption of H using Ki; and, 

a network-connected port for transmitting the job, CKi, and 
CH« to the first device for job processing. 

28-29. canceled 

30. (currently amended) The system of claim 18 
further comprising: 

a plurality of devices Ni, whoro 1< i < n, each receiving the 
unencrypted electronically formatted job at a network-connected port, 
along with CKi, where CKi is generated by encrypting Ki using an 
corrooponding asymmetrical encryption public key pubK[[«J] uniquely 

wherein each device decryption unit decrypts CKi using 
corresponding asymmetrical encryption private key privK;, to recover Ki. 

31. (currently amended) The method of claim 18 
further comprising: 

a plurality of devices N», where 1< i Hn, each receiving the 
unencrypted electronically formatted job at a network-connected port, 
along with CKi, where CKi is generated by encrypting Ki , uniquely 
associated with eac h device, using an corro o ponding asymmetrical 
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encryption public key pubKfc]], uniquely associated with earh rW.o and 
CHi, a hash of the job encrypted using corresponding symmetrical 
encryption key K/j-aadj 

wherein each deviao inHi.rW n jn PT3Tt l - nn 1 1T1 , t fo r d coiyp|, u u . 
€K< Husmg acymmotrical onorvptinn prixrnt^ l my p r ivE i, t o recover 
corresponding oymmotrical encryption kc y- S^for the decryption of the 
encrypted rooourco . 

32-33. canceled 



34. (currently amended) A system for accessing 
network-connected processing resources, the system comprising: 
a second device including: 

a processor to supply an unencrypted job; 
a hash unit having an interface to accept the job 
and to supply a hash of the job (H); 

an encryption unit having an interface to accept 
Hi, to supply CKf, the encryption of symmetrical encryption key Ki, 
where lg i sn , using pubK, [[and]] CHi, , where K/ throug h K™ 
correspond to encrypted resources Cn, thvm,^ m?-, the encryption 
of H using Kj , and an encryp ted r e sour ce selection; ™ mman A- g^d, 
a network-connected port for transmitting the 
job, CKj, and CHi to a first device for job processing. 
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